Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
File: Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft (raw, json)
Hash identifier: iK1Xk/HdC4WVjui0nYZV0/zKOfg+MdWafM8I2HswSJQ=
Subject key identifier: B4:87:5B:D1:95:6E:45:1F:94:3A:40:64:9D:30:CC:66:0A:85:42:29
Authority key identifier: 66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
Certificate issuer: /CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Certificate serial: 019D330802B42F7BBD53FC8AE6467E0D493C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
Manifest number: 0A81
Signing time: Sat 28 Mar 2026 06:00:56 +0000
Manifest this update: Sat 28 Mar 2026 06:00:56 +0000
Manifest next update: Sun 29 Mar 2026 06:00:56 +0000
Files and hashes: 1: Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl (hash: iOvnQV0kKP2dC6X88avO1hqPzoQ2OYxljhhFPOSs8M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:02:b4:2f:7b:bd:53:fc:8a:e6:46:7e:0d:49:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Validity
Not Before: Mar 28 06:00:56 2026 GMT
Not After : Mar 29 06:00:56 2026 GMT
Subject: CN=b4875bd1956e451f943a40649d30cc660a854229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:ec:15:73:1e:ee:90:55:e7:8c:a2:47:ec:
75:ea:42:8c:8a:7f:3c:49:c2:04:75:09:62:0e:2b:
85:8a:ee:04:48:a2:02:cc:36:8a:c5:d0:1f:ba:3a:
eb:de:80:51:ea:dc:94:86:0b:f2:e7:2e:59:89:0e:
7e:00:49:76:26:af:63:a5:c7:b8:bc:8c:ff:9b:c9:
54:d6:97:3f:41:c5:fc:3f:ee:61:19:28:04:9c:53:
94:1f:52:bc:83:65:35:39:dd:b5:c8:9d:ca:75:33:
24:d8:d3:34:97:28:1f:03:76:ff:8a:62:57:c6:18:
3b:b1:6f:90:a8:bb:f2:28:97:5a:89:35:88:dc:fc:
fe:63:54:1a:6b:39:24:23:46:97:e5:9a:65:24:60:
f0:15:cc:f2:cd:03:34:50:2b:40:7f:2e:38:e6:b9:
76:96:53:74:04:4f:bd:98:8d:ee:d8:67:74:a6:c2:
04:e5:2a:38:40:ba:b6:3b:0a:56:01:78:cd:35:07:
80:d7:8c:27:cb:ba:c5:6d:1d:72:c4:5f:e7:fa:f5:
01:88:9e:a3:14:74:e6:bc:b7:f0:ee:0f:ba:32:71:
6f:cf:6c:04:da:84:09:9a:2f:98:7c:a5:29:c5:80:
21:24:44:61:f0:af:ab:18:48:11:c3:31:c7:f1:37:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:87:5B:D1:95:6E:45:1F:94:3A:40:64:9D:30:CC:66:0A:85:42:29
X509v3 Authority Key Identifier:
keyid:66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:87:4f:8a:7b:87:bb:2c:57:a7:12:22:3b:fc:77:8e:97:f7:
6c:4a:98:42:a4:a8:6b:64:cb:62:b3:a7:fc:0a:d4:15:24:d3:
fe:a7:b8:6f:ac:5d:d4:e8:f6:42:fe:f8:83:8e:df:7f:03:4c:
b7:94:93:02:73:86:cd:4b:55:86:c1:44:27:9e:67:c7:ad:44:
dd:f4:fb:b4:77:69:84:72:e8:d2:eb:e0:f2:28:83:d6:ba:1f:
86:e2:b8:98:72:16:0c:36:da:8b:23:92:8f:11:27:02:74:c8:
85:d2:66:c5:0f:25:dd:9b:58:26:06:4d:48:7b:b9:bc:b6:28:
5c:0d:89:ba:f9:92:de:bf:86:93:09:fd:39:5c:67:ff:99:31:
8e:f0:e0:17:07:ce:e9:a2:3c:87:82:bd:a2:b8:15:0e:de:91:
54:93:50:67:44:20:d8:a7:18:d2:3c:e3:e9:c8:d8:4b:bb:1e:
12:ab:cc:89:21:b2:28:25:aa:32:d0:31:9d:b7:6c:08:62:93:
c9:77:69:10:45:8f:52:2a:76:d3:66:b2:36:69:0b:22:a8:dc:
58:78:8e:c7:fb:fa:bc:c2:a1:54:4a:bd:07:00:e8:a3:87:b4:
d9:1a:1e:2f:6a:9c:94:04:1f:01:87:c3:42:13:f9:3f:7f:9c:
7e:1c:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:23 2026 by rpki-client